Google Sues Chinese Cybercrime Network for AI-Powered Phishing Scams

Google has filed a lawsuit against a Chinese cybercrime network, Outsider Enterprise, alleging it uses AI to orchestrate large-scale phishing attacks that have scammed “hundreds of thousands of victims” and caused estimated losses of $1.9 billion, according to the company’s complaint. The tech giant is seeking to dismantle the operation, which it claims leverages AI tools like its own Gemini platform to create fake websites and send scam texts impersonating major brands.

What is Outsider Enterprise?

Outsider Enterprise is a cybercriminal network accused of deploying an AI-powered “phishing-for-dummies” software suite that enables users to create fraudulent websites and conduct scams with minimal technical expertise, according to Google’s lawsuit. The platform, available for $88 per week or $200 per month, offers over 290 pre-built templates mimicking legitimate services, including telecom providers, financial institutions, and government agencies, the complaint states. Google alleges the group used its own infrastructure, including Google Drive and Google Cloud, to host phishing websites.

How Did Google Discover the Operation?

Google detected the operation through its AI-powered tools, which flagged 55,000 spam texts in two weeks in May 2023, the company said. The lawsuit reveals the network operated on Telegram channels, where cybercriminals collaborated to share strategies and weaponize AI-generated code. Since July 2023, the phishing platform has been linked to the theft of at least 3.87 million credit cards, according to an FBI spokesperson, who confirmed the bureau seized domains, Shopify storefronts, and accounts used by the group in coordination with Google and Lumen’s Black Lotus Labs.

What Are the Legal Implications?

Google is suing Outsider Enterprise for copyright infringement, racketeering, wire fraud, and false advertising, seeking compensatory and punitive damages. The lawsuit also aims to block the group from continuing its activities. The FBI has confirmed the operation’s scale, noting that cybercriminals stole “at least 36,000 payment cards issued by financial institutions in 95 countries.” The agency is working with Google and telecom providers like AT&T, T-Mobile, and Verizon to block scam texts.

Why Does This Matter for Cybersecurity?

This case highlights the growing threat of AI-fueled cybercrime, as malicious actors increasingly exploit advanced tools to automate scams. Google’s AI systems intercept over 10 billion scam messages monthly, but the scale of Outsider Enterprise’s operation underscores the challenges of combating decentralized, global cybercriminal networks. The lawsuit could set a precedent for holding AI-powered fraud schemes accountable, according to cybersecurity experts.